ET-6630 Gigabit Encrypted Ethernet Tunnel

Encrypted Ethernet Tunnel

  • Sustained 128 bit AES encryption throughput greater than 300 Mbps
  • 10/100/1000 BaseT ethernet ports
  • Easy to setup and maintain
  • Supports up to 100 ET-3302 or ET-6602 clients
  • Interoperates with small ET-3302 and ET-6602 client devices
  • Set unit up as server or client device
  • Extensive statistics logging and diagnostic tools
  • Tunnels all ethernet protocols, not just IP
  • AES or other encryption techniques
  • Ethernet to ethernet connections
  • Link ETs LAN to LAN
  • Passes all ethernet protocols
  • Compact 1U high: stand-alone or rack mounting
  • Bridges 802.1Q tagged V-LAN trunks
  • Uses Radius back-end authentication or an internal database
ET-6630  Front View

ET-6630 - 300 Mbps Throughput

Specifications How To Order

Indicators (front panel)

APPLICATION Notes & Manual

Common Applications

The ET-6630 is often used as the host in conjunction with multiple smaller ET remote products. In higher performance applications, ET-6630 units are used in pairs for high bandwidth point-to-point encrypted links.
  • Utilities – Gas and oil production, pipelines, electric generation, transmission and distribution
  • Retail – Stores, kiosks, credit card machines --- especially those using wireless links
  • Law Enforcement – Small remote offices
  • Medical – AES encryption of the ET meets HIPAA requirement for securing data over open networks such as the Internet. The medical industry is mandated by HIPAA to meet HIPAA privacy and security requirements over open networks.
  • Real Estate – Connecting to and updating the database of listed homes.
  • Field sales – personnel working out of the home, hotel rooms wired for high speed Internet access.
  • Financial industry – Additional security on internal corporate links, branch offices, ATM machines, key personnel remote secure access.
  • Remote office with unlimited network devices, with the ET shared using ethernet switchs or hubs.
  • Added security within a large corporate network
  • Office to Home
  • 2 nets at each end, bridged via the Internet
  • Remote network monitoring via the Internet


The ET-6630 is an Internet Appliance device for creating encrypted ethernet tunnels. It features two Gigabit ethernet LAN ports (10/100/1000 BaseT) .

The ET-6630 encrypts data between private networks using the public Internet or any private Intranet network as the transport.

The ET series uses AES or ISAAC encryption. AES is the US Government standard, selected using an open selection process, to replace DES and 3DES encryption.

The ET series operates through firewalls with only one port of your choice opened. It bridges all ethernet protocols including IPX, IP, NetBEUI and other proprietary protocols.

The ET series is straight-forward, easy to configure and maintain. The ET series has state-of-the-art AES encryption security without the configuration complexity of VPN.

The ET-6630 operates with an internal encrypted pass-phrase database or an external Radius server. The external Radius server could be the same one used for other devices in an organization's IT department.

Due to the encryption employed in these products, the ET-6630 series products are export controlled items and are regulated by the Bureau of Industry and Security (BIS) of the U.S. Department of Commerce. Export regulations may delay delivery to some areas. The ET products will not be exported or shipped for re-export to Country Group E:1 as defined by the BIS. The lower performance ET products (ET-6600, ET-3300 ) are readily exported to most other countries using the "ENC" exemption. The ET-6630 requires an individual export license for each delivery outside the USA. Our companion products, the ET-6600 and ET-3300 are exportable under similar regulations as "mass market encryption devices".



- Two 10/100/1000BaseT ethernet ports:

Protocol Features:





Application Notes:

Click here to download a copy of the manual.

The Facts, Please.

Read the encryptor FAQ for quick answers to questions others have asked. Just click here.

All DCB ethenet encryptors operate similarly, with differences being in the protocols, capabilities, and authentication methods. Since the topology is comparable for all of them, we show application notes for all these products together.

UT Product Security In Perspective
This document provides an overview of the UT security perspective as well as best practices for configuring UT encryptors.

Redundancy Techniques Using DCB Tunnel Devices and Software.
Users have come to rely on DCB tunnel products to implement secure networks for mission critical applications in which downtime must be kept to a minimum. Thus it is not unusual for customers to ask questions about techniques that may be applied to make the tunnel network more robust. This document describes some of those techniques with examples.

Quick-start guide to the XT-3306.
This application note guides the new XT-3306 user from opening the boxes to having a working encrypted tunnel between two XT-3306 units on a test bench. Step-by-step instructions make it quick and painless to learn the configuration process. One difference between the XT and the UT/ET families is that the XT allows the selection of TCP and UDP protocols for the tunnel path.

Troubleshooting guide for the above Quick-start.
If it didn't go well and doesn't immediately work, this guide offers some troubleshooting hints. Most people won't need this, but it's here if you do.

Encrypted Bridge Installation Option
An application note describing an appliance-like installation that allows the Tunnel to be located anywhere on the local LAN. Known around DCB as the "Single-Port Installation".

Using the UT Encrypted Bridges and UT-SOFT with IP Multicast.
Discusses applying the UT products to transport VOIP multicast via non-multicast wide area networks. Examples showing IP voice dispatch radios for public service agencies. The UT supports multi-cast IP over normal uni-cast networks and allows a private multi-cast network to span multiple IP networks. The UT-SOFT software client allows any PC to be a securely connected node on a remote network

Motorola MIP 5000 VoIP Radio Console VPN Solution Guide
This Motorola produced MIP 5000 VoIP Radio Console VPN Solution Guide features a virtual private network (VPN) solution that has been tested with MIP 5000 VoIP Radio Console. The VPN solution uses a pair of encrypted Ethernet bridges to provide a secure Ethernet tunnel between the dispatch center and a remote MIP 5000 console. The secure Ethernet tunnel supports a remote console operator receiving audio from and transmitting audio to radio channels and other MIP 5000 consoles using AES encryption.

UT Tunnel Installation Note - "Living On a Wild Feed... Safely"
This short application note summarizes the options and requirements for directly connecting the untrusted interface of UT encrypted tunnels to the Internet. Yes, the UT tunnels may be safely living on the wild side of your firewalls and if properly configured appear to be a "black hole" to your adversaries!

Using the UT for Remote Management Applications Since the UT along with UT-Soft enables a remote workstation to have a virtual presence on a remote LAN segment, it's quite useful for network monitoring and analysis, similar to a RMON without the headaches. Download an application note that discusses using UT-Soft and our UT servers for remote LAN network montoring.

The UT series operates similarly to our ET series encrypted tunnel. The main difference between the two product lines is that the UT uses UDP/IP protocol for the tunnel link while the ET uses TCP/IP for the tunnel link protocol. The following ET application notes apply to the UT as well as the ET series.

ET Encrypted Bridge Quick-Start Installation Guide
A cookbook style quick start guide to installing the ET Encrypted Bridges. Illustrates common usage examples with fill-in-the-blank instructions.

ET-3302/6600 Encrypted Bridge Applications
Some ways the ET products are being used to tunnel IP traffic in the real world.

ET Encrypted Bridge Installation Option
An application note describing an appliance-like installation that allows the ET to be located anywhere on the local LAN. Known around DCB as the "Single-Port Installation".

Using the ET Encrypted Bridges with 801.Q VLANs
Discusses configuring the ET products to handle 801.Q VLAN traffic. The ET supports 801.Q VLAN tagged packets, and allows a VLAN to span multiple IP networks.

Using the ET Encrypted Bridges with IP Multicast.
Discusses applying the ET products to transport VOIP multicast via non-multicast wide area networks. Examples showing IP voice dispatch radios for public service agencies. The ET supports multi-cast IP over normal uni-cast networks and allows a private multi-cast network to span multiple IP networks.

Automating Dial-Up Router and Bridge PPP Connections
An application note that details one common method of automating the use of DCB routers and bridges to dial multiple remote locations on a scheduled or automated basis.

Applications Drawing

How to Order Due to the nature of this product, please phone us at 800-432-2638 or 217-897-6600 to discuss your encryption applicaions.

ET-6630 Encrypted Ethernet Tunnel Appliance with Two 10/100/1000BaseT ports, 300 Mbps throughput
$ 4695
Other ET series products that interoperate with the ET6630. Data sheets are here.
ET-6600 Encrypted Ethernet Tunnel Appliance with Two Async Ports, Two LAN Ports
$ 489
ET-6690 EET with one Async Port, internal V.92 Modem, Two LAN Ports
$ 789
ET-3300 EET with Two LAN Ports, No serial Async Ports
$ 329
ET-66xx-12V 9-18 VDC internal power supply option (ET-6600 only)
$ 75
ET-66xx-24V 18-35 VDC internal power supply option(ET-6600 only)
$ 75
ET-66xx-48V 36-72 VDC internal power supply option(ET-6600 only)
$ 75
ET-66xx-125VDC 125 VDC external power supply option
$ 125

Data Comm for Business Inc.
2949 County Road 1000 E
Dewey, Il 61840
Voice: 217-897-6600
Toll Free: 800-4-DCB-NET
Toll Free: 800-432-2638
Email: Contact Page
Fax: 217-897-8023
All DCB web pages copyright ©1995- Data Comm for Business, All rights reserved.
EtherPath®, EtherSeries®, EtherPoll®, EtherBridge® and EtherModem® are Registered Trademarks of Data Comm for Business, Inc.